$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3131342e3131322e39362e302f32322d3332203d3e203233373234.roa File: 3131342e3131322e39362e302f32322d3332203d3e203233373234.roa (raw, json) Hash identifier: 8pHAqJYa23b6fpRrOA0UUI0P3RbCYLqzJ0Yh72ibBXw= Subject key identifier: 22:6C:64:98:26:FB:EB:5A:CF:04:42:4E:47:C8:3C:90:EF:1D:F2:B0 Certificate issuer: /CN=20CAC8E70B5CB3094E47FF051623A98578C1E315 Certificate serial: 1B0CB333F3EA71217C21749486A14F5961FA6548 Authority key identifier: 20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3131342e3131322e39362e302f32322d3332203d3e203233373234.roa Signing time: Wed 15 Apr 2026 07:57:11 +0000 ROA not before: Wed 15 Apr 2026 07:52:11 +0000 ROA not after: Wed 14 Apr 2027 07:57:11 +0000 asID: 23724 IP address blocks: 114.112.96.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:10:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:0c:b3:33:f3:ea:71:21:7c:21:74:94:86:a1:4f:59:61:fa:65:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20CAC8E70B5CB3094E47FF051623A98578C1E315 Validity Not Before: Apr 15 07:52:11 2026 GMT Not After : Apr 14 07:57:11 2027 GMT Subject: CN=226C649826FBEB5ACF04424E47C83C90EF1DF2B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ec:11:82:71:c7:ff:50:dc:1a:75:00:99:1a: df:d0:1e:1e:30:35:98:77:08:7d:b2:d4:09:cf:93: 95:eb:48:98:7c:de:1b:ec:55:a8:a2:74:d0:40:4a: fb:a7:2f:fe:8a:7b:49:19:e9:dd:e6:b8:8a:a8:4e: fb:25:4a:f9:7d:1e:7e:07:ab:04:af:77:4d:6a:58: b1:e6:f8:e7:06:be:25:95:5b:18:b6:ba:56:f1:b4: ba:ef:ac:79:f9:72:bb:56:d5:49:b3:75:2b:61:6f: cd:d2:be:ef:3a:37:a6:19:58:2d:95:87:f1:0d:86: 03:00:e6:57:f3:15:a1:ab:43:6b:2e:e5:dc:0e:d3: 3a:55:8c:25:33:0e:ac:f1:fd:3b:b7:70:6f:13:36: 08:ca:57:d5:f1:b0:6f:1c:c0:93:37:0e:e8:48:1b: 49:68:7b:09:ea:3d:fa:09:87:e6:db:a2:9f:1d:27: df:5d:5c:30:d8:a8:84:47:d1:d9:d2:4a:d0:6b:1f: 6a:53:d0:0d:43:51:f4:eb:67:a0:14:0f:f4:12:e5: 9e:0f:28:4d:a5:87:e4:2b:af:27:13:03:19:40:ec: 3b:0b:79:87:a0:1f:53:af:3a:c7:3b:e3:8c:8a:60: 98:e2:31:66:1b:3a:e8:dc:08:55:a4:97:5d:d0:8b: 94:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:6C:64:98:26:FB:EB:5A:CF:04:42:4E:47:C8:3C:90:EF:1D:F2:B0 X509v3 Authority Key Identifier: keyid:20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3131342e3131322e39362e302f32322d3332203d3e203233373234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.112.96.0/22 Signature Algorithm: sha256WithRSAEncryption 78:bc:d7:98:95:43:5d:a2:86:08:f2:7f:14:74:64:95:4b:f5: 5e:90:b2:86:50:0c:ed:51:6d:ce:a3:3a:3d:2c:9e:d8:ca:bc: a8:58:b1:fa:23:84:c5:1e:7c:d2:14:86:6c:8a:69:a0:26:f4: 87:db:b5:10:27:d9:95:3c:0c:d1:00:5f:c4:71:77:00:cb:a6: 13:03:06:98:a6:5b:33:f0:52:99:49:f5:27:77:21:96:90:04: 34:91:a2:52:14:a3:43:03:ef:13:67:07:b0:1d:01:c6:03:79: 2f:09:89:2e:e2:1d:6a:e4:af:19:b0:2d:aa:c7:40:02:d6:c4: 8f:0f:35:5e:66:62:08:c5:6c:4a:40:9b:27:10:83:c5:8c:5d: ff:75:3d:37:4f:38:6e:13:97:d2:65:e0:7a:2a:0b:f8:b6:86: 04:e1:7b:13:36:e3:b2:08:f7:f3:69:ce:99:4c:b9:f4:c3:46: 17:97:a5:f8:95:61:0e:92:70:e2:30:24:2b:f0:09:be:e4:b8: c3:1c:7e:15:6e:7a:b5:de:51:c1:95:36:b7:c7:e7:6d:51:f4: cf:7c:b6:43:55:f0:db:72:a9:6c:cc:57:b9:05:3f:c4:9c:4f: b5:ff:8e:12:59:77:bf:56:e2:8e:50:f2:2c:76:16:96:60:e7: 90:b2:65:ad -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUGwyzM/PqcSF8IXSUhqFPWWH6ZUgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBDQUM4RTcwQjVDQjMwOTRFNDdGRjA1MTYyM0E5ODU3 OEMxRTMxNTAeFw0yNjA0MTUwNzUyMTFaFw0yNzA0MTQwNzU3MTFaMDMxMTAvBgNV BAMTKDIyNkM2NDk4MjZGQkVCNUFDRjA0NDI0RTQ3QzgzQzkwRUYxREYyQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX7BGCccf/UNwadQCZGt/QHh4w NZh3CH2y1AnPk5XrSJh83hvsVaiidNBASvunL/6Ke0kZ6d3muIqoTvslSvl9Hn4H qwSvd01qWLHm+OcGviWVWxi2ulbxtLrvrHn5crtW1UmzdSthb83Svu86N6YZWC2V h/ENhgMA5lfzFaGrQ2su5dwO0zpVjCUzDqzx/Tu3cG8TNgjKV9XxsG8cwJM3DuhI G0loewnqPfoJh+bbop8dJ99dXDDYqIRH0dnSStBrH2pT0A1DUfTrZ6AUD/QS5Z4P KE2lh+QrrycTAxlA7DsLeYegH1OvOsc744yKYJjiMWYbOujcCFWkl13Qi5QtAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUImxkmCb761rPBEJOR8g8kO8d8rAwHwYDVR0j BBgwFoAUIMrI5wtcswlOR/8FFiOphXjB4xUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk4NDI5NDc2NzA5OTkwNS8wLzIwQ0FDOEU3MEI1Q0IzMDk0RTQ3RkYwNTE2MjNB OTg1NzhDMUUzMTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjBDQUM4RTcwQjVDQjMwOTRFNDdGRjA1MTYyM0E5ODU3OEMxRTMxNS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NTk4NDI5NDc2NzA5OTkwNS8wLzMxMzEzNDJlMzEz MTMyMmUzOTM2MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzMzM3MzIzNC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAnJwYDANBgkqhkiG9w0BAQsFAAOCAQEAeLzXmJVDXaKGCPJ/FHRklUv1 XpCyhlAM7VFtzqM6PSye2Mq8qFix+iOExR580hSGbIppoCb0h9u1ECfZlTwM0QBf xHF3AMumEwMGmKZbM/BSmUn1J3chlpAENJGiUhSjQwPvE2cHsB0BxgN5LwmJLuId auSvGbAtqsdAAtbEjw81XmZiCMVsSkCbJxCDxYxd/3U9N084bhOX0mXgeioL+LaG BOF7Ezbjsgj382nOmUy59MNGF5el+JVhDpJw4jAkK/AJvuS4wxx+FW56td5RwZU2 t8fnbVH0z3y2Q1Xw23KpbMxXuQU/xJxPtf+OEll3v1bijlDyLHYWlmDnkLJlrQ== -----END CERTIFICATE-----Generated at Fri Apr 17 22:26:29 2026 by rpki-client